Target US has proposed to pay $10 million to settle a class-action lawsuit over its massive 2013 data breach, according to court documents filed in the US District Court in Minnesota on Wednesday.
The settlement, if approved by a judge, would allow individual shoppers to receive up to $10,000 in damages if they can prove they endured losses stemming from Target's data breach. Up to 40 million shoppers had their credit card data stolen during the breach, while up to 70 million had personal information such as addresses and phone numbers stolen.
Read also:
• Target CEO steps down following data breach
• Kiwis' data threatened after Russian hackers steal a billion passwords
The settlement also states that Target will create a new position, a chief information security officer, who will be responsible for protecting customer data.
Target promises in the court documents that it will implement a program to train Target employees on security practices and will periodically review its safeguards to make sure they are sufficient to protect consumers.